CVE-2015-0290

CVE-2015-0290 describes a denial-of-service vulnerability in OpenSSL versions 1.0.2 prior to 1.0.2a. Specifically, the multi-block feature in the ssl3_write_bytes function on 64-bit x86 platforms with AES NI support fails to properly handle certain non-blocking I/O cases. This flaw allows remote attackers to cause a denial of service through pointer corruption and application crashes. The vulnerability has a CVSS score of 5.0 (medium severity) with an attack vector of network, low attack complexity, and no authentication required, leading to a potential impact of partial availability loss. Its EPSS score is 0.17612, indicating a low likelihood of exploitation. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. While there is limited community discussion and media coverage, the vulnerability is not listed on the CISA KEV catalog or Hot List, suggesting it is not a high-priority threat.